PT-2014-4178
CVE-2014-1418
·
تاريخ النشر
2014-05-14
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 4.0
9.1
حرجةالمقاييسAV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Django versions 1.4 through 1.4.12
Django versions 1.5 through 1.5.7
Django versions 1.6 through 1.6.4
Django versions 1.7 before 1.7b4
Description
The issue allows remote attackers to obtain sensitive information or poison the cache via a request from certain browsers, due to the improper inclusion of the
Vary: Cookie or Cache-Control header in responses.Recommendations
For Django versions 1.4 through 1.4.12, update to version 1.4.13 or later.
For Django versions 1.5 through 1.5.7, update to version 1.5.8 or later.
For Django versions 1.6 through 1.6.4, update to version 1.6.5 or later.
For Django versions 1.7 before 1.7b4, update to version 1.7b4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾